CVE-2002-1160

🗓️ 01 Sep 2004 04:00:00Reported by mitreType

The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, allowing local users to gain root privileges

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2002-1160	1 Sep 200404:00	–	cvelist
RedHat Linux	(RHSA-2003:028) pam security update	28 Jan 200300:00	–	redhat
CERT	pam_xauth may insecurely forward "X MIT-Magic-Cookies" to new sessions	4 May 200300:00	–	cert
Tenable Nessus	RHEL 2.1 : pam (RHSA-2003:028)	6 Jul 200400:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : pam (MDKSA-2003:017-1)	31 Jul 200400:00	–	nessus
NVD	CVE-2002-1160	19 Feb 200305:00	–	nvd

Nvd

Node

redhat linuxMatch7.1

redhat linuxMatch7.2

redhat linuxMatch7.3

redhat linuxMatch8.0

Source	Link
redhat	www.redhat.com/support/errata/RHSA-2003-028.html
securityfocus	www.securityfocus.com/bid/6753
redhat	www.redhat.com/support/errata/RHSA-2003-035.html
mandrakesoft	www.mandrakesoft.com/security/advisories
sunsolve	www.sunsolve.sun.com/pub-cgi/retrieve.pl
iss	www.iss.net/security_center/static/11254.php
kb	www.kb.cert.org/vuls/id/911505
distro	www.distro.conectiva.com.br/atualizacoes/
marc	www.marc.info/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Sep 2004 04:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS27.2

EPSS0.00066